[RSI, security] Refuse sudo/doas privilege escalation in kernel bash - #2429

Open

sethkarten wants to merge 36 commits into

mainfrom

cb-fix-sudo-guard

Commits on Sep 16, 2026

[RSI, security] Refuse sudo/doas privilege escalation in kernel bash
sethkarten
committed
e75eabc

Commits on Sep 17, 2026

fix(runtime): close sudo-guard quoting, wrapper, stdin, and alias bypasses
sethkarten
committed
0acb8dc
fix(runtime): judge bundled wrapper flags and cap brace expansion in the sudo guard
sethkarten
committed
716d825
fix(runtime): gate heredoc runners on the sudo guard command-word walk
sethkarten
committed
35de5ca
fix(runtime): treat alias bodies that name a runner as runners in the sudo guard
sethkarten
committed
f39a9de
fix(runtime): resolve alias bodies through the sudo guard walk
sethkarten
committed
526598b
fix(runtime): close brace, launcher, here-string, and syntax bypasses in the sudo guard
sethkarten
committed
e3d6268
fix(runtime): correct launcher options and glued here-string payloads in the sudo guard
sethkarten
committed
2e77d95
fix(runtime): take the value options strace, ltrace, and systemd-run really have
sethkarten
committed
c8d4358
fix(runtime): encode launcher value options from their synopses and stop raising on huge brace ranges
sethkarten
committed
2b16707
fix(runtime): complete the launcher option tables and judge plain command names alone
sethkarten
committed
dd7e35f
docs(changeset): name the option-abbreviation gap in the sudo guard's limits
sethkarten
committed
18e24f6
fix(runtime): judge `time` flags and read glued -c payloads only from short bundles
sethkarten
committed
69dd9bf
fix(runtime): read POSIX classes in the sudo guard's glob patterns
sethkarten
committed
56242ef
fix(runtime): read bracket negation before expanding POSIX classes
sethkarten
committed
30b4670
fix(runtime): resolve `hash -p` command-hash entries in the sudo guard
sethkarten
committed
e457c68
fix(runtime): read every `hash -p` spelling and re-walk registered targets
sethkarten
committed
72bd9dc
fix(runtime): close the hash-shadowing and float-duration bypasses
sethkarten
committed
8015f8d
fix(runtime): keep hash registrations from hiding builtins, patterns, redirects
sethkarten
committed
9963831
fix(runtime): judge registered wrappers twice, coproc names, nested alias runners
sethkarten
committed
41d4030
fix(runtime): fail closed when an alias chain outruns the scan depth
sethkarten
committed
cf66036

Commits on Sep 18, 2026

Merge origin/main into cb-fix-sudo-guard: keep the sudo guard and main's boot-lean imports
audit
committed
1755058
Merge branch 'main' into cb-fix-sudo-guard
sethkarten
authored
f0ff2bc

Commits on Sep 20, 2026

Merge branch 'main' into cb-fix-sudo-guard
sethkarten
authored
ab506c5

Commits on Sep 21, 2026

Merge branch 'main' into cb-fix-sudo-guard
sethkarten
authored
2af8c06
Merge branch 'main' into cb-fix-sudo-guard
sethkarten
authored
aed1bfb
Merge branch 'main' into cb-fix-sudo-guard
sethkarten
authored
4aff3b9

Commits on Sep 22, 2026

Commits on Sep 23, 2026